Privacy policy.

Who we are

BLINGbeauty is a beauty business run by Paulina Michalska, operating within Defined Studio, Southampton. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), Paulina Michalska is the data controller for the personal data described in this policy.

Defined Studio, Royal Mail House, Terminus Terrace, Southampton SO14 3FD
Email: enquiries@blingbeautysouthampton.co.uk
Telephone: 07910 883316

What this website does

This website provides information about our treatments and lets you send an enquiry. It does not take bookings or payments. Appointments and payments are handled by Fresha, a separate service (see “Other services” below).

The data we collect and why

Enquiry form

If you use the enquiry form we collect your name, email address, telephone number (optional), the service you are asking about and your message. We use this only to reply to your enquiry. Our legal basis is our legitimate interest in responding to people who contact us, or steps taken at your request before entering into a contract.

Please do not include sensitive health information in the form. If a treatment needs a health discussion, Paulina will cover it with you directly before your appointment.

Messages by WhatsApp, Instagram, Facebook, email or telephone

If you contact us through these channels we receive whatever you choose to send, together with your contact details, and use it to reply and arrange your appointment. These services have their own privacy policies.

Appointments and client records

When you book through Fresha, and when you attend a treatment, we may hold your contact details, appointment history, consultation and consent information, and where relevant health information needed to treat you safely (for example allergies, medication or skin conditions), as well as treatment notes and before and after photographs. Health information is special category data. We process it with your explicit consent and where necessary to provide treatment safely. We only take or use photographs for marketing, including on this website or social media, with your separate written consent, which you can withdraw at any time.

Technical data

Our hosting provider, Cloudflare, processes your IP address and basic request data to deliver the website, protect it from abuse and limit repeated form submissions. We do not use advertising or analytics cookies on this website, and fonts are served from our own site.

Who we share data with

We do not sell your data. We share it only with providers that help us run the business, who act on our instructions or under their own privacy terms:

• Cloudflare: website hosting, security and delivery of enquiry emails.
• Yahoo: the mailbox that receives enquiries.
• Fresha: online booking, appointment records and payments, including Klarna where you choose it at checkout.
• Meta (WhatsApp, Instagram, Facebook, Messenger): if you contact us through them.

We may also disclose data where required by law, or to a professional insurer or regulator where necessary.

International transfers

Some of these providers process data outside the UK, including in the United States. Where they do, transfers rely on safeguards recognised under UK law, such as the UK International Data Transfer Addendum or an adequacy decision.

How long we keep it

• Enquiries that do not lead to an appointment: up to 12 months.
• Client and treatment records: generally up to 8 years after your last treatment, in line with insurer and professional guidance, then securely deleted. Records for anyone under 18 are kept longer, as advised by our insurer.
• Photographs used with your consent: until you withdraw consent.
• Booking and payment records held by Fresha: according to Fresha’s policy and legal accounting requirements.

Your rights

You have the right to access your data, correct it, have it erased, restrict or object to our use of it, receive a portable copy, and withdraw consent at any time. Some records must be kept by law or for insurance reasons, in which case we will explain why. To make a request, email enquiries@blingbeautysouthampton.co.uk. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk (opens in new tab) or on 0303 123 1113. We would appreciate the chance to put things right first.

Security

This website uses HTTPS. We keep client records private, limit access to them and use reputable providers with appropriate security. No online service is completely risk free, so please contact us straight away if you suspect a problem.

Links to other sites

This website links to Fresha (opens in new tab), Instagram, Facebook and WhatsApp. They are responsible for their own privacy practices.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.